US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident

The US Marshals Service, the enforcement branch of the nation’s federal courts, has admitted a “major” breach of its information security defenses led to a ransomware infection and exfiltration of “law-enforcement sensitive information." NBC broke news of the incident, which Marshals Service spokesperson Drew Wade described as …

[Anonymous Coward]

That's a truly criminal level of neglect. Wow.

[Anonymous Coward]

Am I reading this right?

'The incident took place on February 17th and was detected on the same day in a “stand-alone USMS system”.'

Successful detection on day 1, and apparently on only one system? While definitely bad that anything was broken into, that's a way, way better job than the vast majority of security, like the News Corp hack undetected for 2 years.

[Brian 3]

Re: Am I reading this right?

It was no doubt detected the same day because when it was done shipping out the info and encrypting everything the machine probably stopped working.

That, or it's the one machine full of their dirty deals.

[Androgynous Cow Herd]

Who downvoted that?

Upvoted to get you back to zero…. the opposing position must be that no competent IT org could ever possibly be breached…which is nonsense. As an IT org, you would have to be perfect (and lucky) forever…and the other side just needs to get lucky, once….and there is no defensive corollary to a zero-day.

[Anonymous Coward]

Stone tablets are looking pretty good these days

Confounded infernal electrical gadgets!